IBM Enterprise Console manual Format File, PollInterval, PreFilterMode

previous line count is read. For example, the file has one line. After the poll interval elapses, the file is overwritten with two lines. Only the second line is read on the next polling.

The adapter polls the SYS:SYTEM\SYS$LOG.ERR file by default.

Additional files can be specified with the LogSources keyword.

PollInterval

Specifies the frequency, in seconds, to poll each log file listed in the

LogSources keyword for new messages. The default value is 120 seconds.

PreFilter

An event matches a PreFilter statement when each attribute=value specification in the PreFilter statement matches a message in the log file. A PreFilter statement must contain at least the log file specification, and can contain up to three additional specifications: event ID, event type, and event source. The order of the attributes in the statement does not matter.

You can specify multiple values for each attribute by separating each with a comma.

Each PreFilter statement must be on and contained in a single line, no greater than 512 characters.

The PreFilter keyword is optional. All NetWare server log events are sent to the adapter if prefilters are not specified.

PreFilterMode

Specifies whether NetWare server log events that match a PreFilter statement are sent (PreFilterMode=IN) or ignored (PreFilterMode=OUT). Valid values are IN, in, OUT, or out. The default is OUT.

The PreFilterMode keyword is optional; if PreFilterMode is not specified, only events that do not match any PreFilter statements are sent to the adapter.

If you set PreFilterMode=IN, make sure you have one or more PreFilter statements defined as well.

Stop and restart the adapter for any changes to take effect.

Format File

The format file contains message format descriptions and their mapping to BAROC events. The message fields of a NetWare server event are matched against the format descriptions in this file and when a match succeeds, the corresponding IBM Tivoli Enterprise Console event is generated by the adapter. The format file contains predefined mappings for some common NetWare server events and can be customized to add new messages.

A standard NetWare server event from the SYS$LOG.ERR file is written to an ASCII message in the following sequence. Consult the appropriate NetWare manuals for the meanings:

vThe date (month-day-year) and time; for example: 7-25-98 1:33:57 am

vModule version-ID; for example: SERVER-4.11-25

vSeverity, locus, and class; for example: Severity=10 Locus=1 Class=5

Note: The meanings of severity and class are not the same as those pertaining to the IBM Tivoli Enterprise Console product.

vThe message text

Chapter 4. NetWare Log File Adapter 57